Microsoft aims to prevent screenshot leaks, addressing the issue one Edge tab at a time.
Sensitive PDFs are receiving screenshot protection, specifically in Microsoft Edge.
Microsoft is aiming to enhance privacy safeguards for your sensitive PDFs by addressing a significant gap in its document protection framework. This also provides businesses with another incentive to maintain Microsoft Edge on their systems.
Starting next month, OneDrive and SharePoint will prevent screen captures when users access certain sensitivity-labeled PDFs through their web viewers in Microsoft Edge. This restriction targets enterprise organizations utilizing Microsoft Purview Information Protection, rather than standard personal OneDrive accounts.
Regular PDFs will remain unaffected.
The protection is specifically for PDFs that carry a sensitivity label lacking the Copy permission, also referred to as EXTRACT. If these criteria are met, screen capture enforcement will be activated by default when the document is opened in Edge. Existing labels and organizational policies will remain intact.
Microsoft
Files without labels and those with permissions not related to these restrictions will function as they currently do. This feature is applicable to OneDrive for Business and SharePoint Online, so you will still be able to take screenshots of things like restaurant menus or instruction manuals. The company noted that this update seeks to bridge the gap between its desktop applications and browser experiences.
Previously, Purview labels could already restrict actions like editing, printing, copying, and taking screenshots in compatible desktop applications. However, PDFs viewed in the browser did not consistently adhere to the same screen capture controls. Administrators can also disable local downloads, preventing users from simply saving a protected document and opening it elsewhere.
Currently, the protection is limited to Edge.
Digital Trends
Other browsers like Chrome, Firefox, Safari, and various mobile web browsers will not implement this restriction once it becomes widely available. Microsoft cautions that users who open protected documents outside of Edge may encounter inconsistent enforcement, and it advises businesses to utilize Conditional Access or browser-management policies to encourage employees to use Edge.
At present, this feature is exclusive to Microsoft Edge. The security benefits are clear, particularly for companies handling sensitive documents such as financial records, legal content, or unreleased products. Its success largely depends on persuading or requiring all involved parties to use Microsoft’s browser.
Windows Latest reports that support for additional browsers and mobile applications may come in the future. However, Microsoft's current announcement does not specify a broader rollout date. Affected organizations should begin to see this feature in early August, followed by a worldwide general rollout expected between mid and late August.
Other articles
Microsoft aims to prevent screenshot leaks, addressing the issue one Edge tab at a time.
Microsoft is addressing a security vulnerability that enabled sensitive PDFs to be intercepted within web browsers. However, this protection is initially available only for Edge users with an enterprise account.
